Filtering the analysis

This section describes two methods of filtering out vulnerabilities from the analysis results (FPR) during the scan phase. You can use a filter file to remove issues based on specific vulnerability instances, rules, and vulnerability categories. You can also use a filter set (created in Fortify Audit Workbench) to remove issues that are hidden from view in an issue template.

Caution! OpenText recommends that you only use filter files if you are an advanced user. Do not use filter files for standard audits, because auditors typically want to see and evaluate all issues that OpenText SAST finds.

This section contains the following topics: